insert into roles (name, description)
values
    ('admin', 'NexaVPN administrator'),
    ('user', 'Standard VPN user')
on conflict (name) do nothing;

insert into settings (category, key, value)
values
    ('vpn', 'default_dns_servers', '["10.20.0.53"]'::jsonb),
    ('auth', 'access_token_ttl_seconds', '900'::jsonb),
    ('auth', 'refresh_token_ttl_seconds', '2592000'::jsonb)
on conflict (category, key) do nothing;

insert into gateways (name, endpoint, public_key, listen_port, vpn_cidr, dns_servers, is_active)
values (
    'primary-gateway',
    'vpn.example.com:51820',
    'replace-me-with-gateway-public-key',
    51820,
    '100.96.0.0/24',
    array['10.20.0.53'],
    true
)
on conflict (name) do nothing;